Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 23 Nov 2016 10:59:32 +0000
From:      bugzilla-noreply@freebsd.org
To:        freebsd-amd64@FreeBSD.org
Subject:   [Bug 214630] netstat displays spurious count for connections in LAST_ACK state inside jail with VIMAGE kernel
Message-ID:  <bug-214630-6-Tt8pafFKB6@https.bugs.freebsd.org/bugzilla/>
In-Reply-To: <bug-214630-6@https.bugs.freebsd.org/bugzilla/>
References:  <bug-214630-6@https.bugs.freebsd.org/bugzilla/>

next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D214630

--- Comment #5 from tony181116@outlook.com ---
Created attachment 177326
  --> https://bugs.freebsd.org/bugzilla/attachment.cgi?id=3D177326&action=
=3Dedit
Showing duplicate fin packets


On further investigation I have noticed duplicate FIN packets being created,
although due to the set up of the machine this may or may not be helpful as=
 the
packets are manipulated by:

1) ipfw to send them to
2) a divert socket which is used to add a GTP header to the packet.
3) back into the firewall for final dispatch to gateway.

Although it did occur to me if these additional fin packets are being count=
ed
before the UDP header is added, then it would be possible to end up with a
negative number of connections in some TCP states.

--=20
You are receiving this mail because:
You are on the CC list for the bug.=



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-214630-6-Tt8pafFKB6>